Microsoft MS-100 Certification: Syllabus, Questions and Exam Details

MICROSOFT MS-100 CERTIFICATION: SYLLABUS, QUESTIONS AND EXAM DETAILS Microsoft MS-100 Exam

EDUSUM.COM Get complete detail on MS-100 exam guide to crack Microsoft 365 Identity and Services. You can collect all information on MS-100 tutorial, practice test, books, study material, exam questions, and syllabus. Firm your knowledge on Microsoft 365 Identity and Services and get ready to crack MS100 certification. Explore all information on MS-100 exam with number of questions, passing percentage and time duration to complete test.

WWW.EDUSUM.COM

PDF

Introduction to Microsoft 365 Certified - Enterprise Administrator Expert Exam The Microsoft MS-100 Exam is challenging and thorough preparation is essential for success. This exam study guide is designed to help you prepare for the Microsoft 365 Identity and Services certification exam. It contains a detailed list of the topics covered on the Professional exam, as well as a detailed list of preparation resources. This study guide for the Microsoft 365 Identity and Services will help guide you through the study process for your certification.

MS-100 Microsoft 365 Identity and Services Exam Summary ● Exam Name: Microsoft 365 Identity and Services ● Exam Code: MS-100 ● Exam Price: $165 (USD)

MS-100: Microsoft 365 Identity and Services

1

WWW.EDUSUM.COM

● ● ● ● ● ● ●

PDF

Duration: 150 mins Number of Questions: 40-60 Passing Score: 700 / 1000 Books / Training: MS-100T00: Microsoft 365 Identity and Services Schedule Exam: Pearson VUE Sample Questions: Microsoft 365 Identity and Services Sample Questions Recommended Practice: Microsoft MS-100 Certification Practice Exam

Exam Syllabus: MS-100 Microsoft 365 Certified Enterprise Administrator Expert Topic

Details

Deploy and manage a Microsoft 365 tenant (15-20%) - plan a tenant - create a tenant Plan and implement a - implement and manage domains Microsoft 365 tenant - configure organizational settings, including security, privacy, and profile - create and manage service requests - create an incident response plan - monitor service health Monitor Microsoft 365 tenant - monitor application access health - configure and review reports, including Azure Monitor logs and Log Analytics workspaces - schedule and review usage metrics, including Workplace Analytics and productivity score

Plan and manage user identity and roles (30-35%) - design synchronization solutions for multitenant and multiforest scenarios - evaluate whether objects should be synchronized, not synchronized, or created as cloud only Plan identity synchronization - identify which Azure Active Directory (AD) Connect features to enable, such as writeback and device synchronization - identify synchronization pre-requisites, including connectivity method, permissions, and server

MS-100: Microsoft 365 Identity and Services

2

WWW.EDUSUM.COM

PDF

Topic

Details requirements - choose between Azure AD Connect and Azure AD Connect cloud sync - plan user sign-in for Azure AD hybrid identities, including pass-through authentication, seamless, and SSO - prepare for identity synchronization by using IdFix - configure and manage directory synchronization by using Azure AD Connect cloud sync Implement and manage - configure and manage directory synchronization by using identity synchronization with Azure AD Connect Azure AD - configure Azure AD Connect object filters - monitor synchronization by using Azure AD Connect Health - troubleshoot Azure AD Connect synchronization - plan Azure AD identities - create and manage users - create and manage guest users Plan and manage Azure AD - create and manage groups, including Microsoft 365 identities groups - manage and monitor Microsoft 365 license allocations - perform bulk user management, including PowerShell - plan for role assignments - manage roles in Microsoft 365 admin center Plan and manage roles in - manage administrative units Microsoft 365 - plan and implement privileged identity management for Azure AD roles

Manage access and authentication (20-25%) - choose an authentication method, including Windows Hello for Business, passwordless, and tokens - implement and manage authentication methods Plan and implement - implement and manage self-service password reset authentication (SSPR) - implement and manage Azure AD password protection - configure and manage multi-factor authentication (MFA) - investigate and resolve authentication issues Plan and implement secure - plan and implement access reviews in Azure AD identity access governance

MS-100: Microsoft 365 Identity and Services

3

WWW.EDUSUM.COM

Topic

Plan and implement application access

PDF

Details - plan and implement entitlement packages in Azure AD identity governance - plan for identity protection - implement and manage Azure AD Identity Protection - plan conditional access policies - implement and manage conditional access policies - plan access and authentication to application registrations and Azure AD enterprise applications - configure application registration in Azure AD - manage user permissions for application registrations - manage OAuth application requests in Azure AD, Microsoft Defender for Cloud Apps, and Microsoft 365 Defender - configure Azure AD Application Proxy - publish enterprise applications in Azure AD

Plan Microsoft 365 workloads and applications (20-25%) - plan for client connectivity to Microsoft 365 workloads - plan Microsoft 365 App compatibility by using the Readiness Toolkit Plan and implement - plan for Microsoft 365 Apps updates Microsoft 365 Apps - specify initial configuration for Microsoft 365 Apps by deployment using the Microsoft 365 Apps admin center - implement Microsoft 365 Apps deployment and software downloads - plan for DNS records required by Exchange Online Plan and implement - plan and implement an Exchange hybrid organization Exchange Online - plan and implement mail routing, including connectors, deployments mail flow rules, and remote domains - plan and implement organizational settings - specify SharePoint site types, site collections, and lists - plan a migration strategy for SharePoint Online and Plan and implement OneDrive Microsoft SharePoint Online, - identify hybrid requirements for SharePoint Online OneDrive, and Microsoft - manage access configurations for SharePoint Online and Teams Microsoft Teams - manage SharePoint Online tenant and site settings - map Phone System features to requirements

MS-100: Microsoft 365 Identity and Services

4

WWW.EDUSUM.COM

Topic

PDF

Details - plan and implement organizational settings - plan, implement, and manage guest and external access

Microsoft MS-100 Certification Sample Questions and Answers To make you familiar with Microsoft 365 Identity and Services (MS-100) certification exam structure, we have prepared this sample question set. We suggest you to try our Sample Questions for MCE Microsoft 365 Enterprise Administrator MS-100 Certification to test your understanding of Microsoft MS-100process with real Microsoft certification exam environment.

MS-100 Microsoft 365 Identity and Services Sample Questions:01. Your network is configured as an Active Directory Domain Services (AD DS) domain. Domain users are in organizational units (OUs) by department.

You run a pilot test with Azure Active Directory (Azure AD) synchronization to include a small subset of users. You create a group named ADDPiIot and add the pilot users to the group. You install Azure AD Connect and configure filtering based on the ADDPilot group and the Operations OU. You need to disable group filtering and configure filtering based on select OUs. You want to avoid changes to users that are already synchronized. What should you do first? a) Delete the ADDPilot group. b) Uninstall Azure AD Connect. c) Disable the built-in scheduler. d) Run the Azure AD Connect installer.

02. Reference Scenario: click here You are evaluating the required processes for Project1. You need to recommend which DNS record must be created before adding a domain name for the project.

Which DNS record should you recommend? a) mail exchanger (MX) b) alias (CNAME) c) host (A) d) host (AAA)

MS-100: Microsoft 365 Identity and Services

5

WWW.EDUSUM.COM

PDF

03. Your company has its main office in Los Angeles and a branch office in Bakersfield. Both offices are part of the same Windows Active Directory (AD) domain and are configured as separate sites. The network includes both company-owned and personal devices.

Your company implements a Microsoft 365 tenant and is rolling out support for cloud-based applications to replace on-premises applications. You configure a hybrid identity with federated authentication. You deploy Intune and enroll company-owned devices. You enable Azure multi-factor authentication (MFA).

As part of your initial rollout, you need to restrict access to SharePoint Online (SPO) to company-managed devices located in the Los Angeles office. Which feature should you use? a) Intune device configuration profile b) Azure AD app passwords c) Intune device compliance policy d) Azure AD Conditional Access 04. You have a Microsoft 365 subscription. You configure a data loss prevention (DLP) policy. You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

You need to prevent the users from bypassing the DLP policy. What should you configure? a) actions b) exceptions c) incident reports d) user overrides 05. You have a Microsoft 365 tenant that contains Microsoft Exchange Online.

You plan to enable calendar sharing with a partner organization named adatum.com. The partner organization also has a Microsoft 365 tenant.

You need to ensure that the calendar of every user is available to the users in adatum.com immediately. What should you do? a) From the Exchange admin center, create a sharing policy. b) From the Exchange admin center, create a new organization relationship. c) From the Microsoft 365 admin center, modify the Organization profile settings. d) From the Microsoft 365 admin center, configure external site sharing.

06. You have a Microsoft 365 subscription. You suspect that several Microsoft Office 365 applications or services were recently updated. You need to identify which applications or services were recently updated.

MS-100: Microsoft 365 Identity and Services

6

WWW.EDUSUM.COM

PDF

What are two possible ways to achieve the goal?

Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. a) From the Microsoft 365 admin center, review the Message center blade. b) From the Office 365 Admin mobile app, review the messages. c) From the Microsoft 365 admin center, review the Products blade. d) From the Microsoft 365 admin center, review the Service health blade.

07. You have a Microsoft 365 subscription. You need to prevent phishing email messages from being delivered to your organization. What should you do? a) From the Exchange admin center, create an anti-malware policy. b) From Security & Compliance, create a DLP policy. c) From Security & Compliance, create a new threat management policy. d) From the Exchange admin center, create a spam filter policy.

08. You manage a Microsoft 365 tenant that has Office 365 Professional Plus. You plan to use the Office Deployment Tool (ODT) to configure updates for Office. You create an XML file with the following contents: <Configuration> <Add OfficeClientEditione32" OfficeMgmtCOMr"True" > <Product ID="0365ProPlusRetair> <Language ID="en-us" /> </Product> </Add> <Updates EnabledeTrue"/> </Configuration> You need to ensure that users in your organization receive updates as soon as they are available. What should you do? a) Add an element named Frequency to the Configuration element and set its value to RTM. b) Set the Channel attribute of the Add element to Monthly. c) Set the OfficeMgmtCOM attribute of the Add element to False. d) Set the Channel attribute of the Add element to Broad.

09. You have a Microsoft 365 subscription. A new corporate security policy states that you must automatically send DLP incident reports to the users in the legal department. You need to schedule the email delivery of the reports. The solution must ensure that the reports are sent as frequently as possible.

How frequently can you schedule the delivery of the reports? a) hourly

MS-100: Microsoft 365 Identity and Services

7

WWW.EDUSUM.COM

PDF

b) monthly c) weekly d) daily 10. Your network is configured as a Windows Active Directory (AD) domain. You are implementing a Microsoft 365 subscription. You create an Azure Active Directory (Azure AD) tenant and run an Azure AD Connect Express Installation.

You need to configure access to an on-premises application for users signing in through Azure AD. What do you need to install on your on-premises network? a) Azure Application Proxy connector b) Web Application Proxy (WAP) server c) Active Directory Federation Services (AD FS) infrastructure d) Network Policy Server (NPS)

Answers:Answer 01:- c Answer 02:- a Answer 03:- d Answer 04:- d Answer 05:- b Answer 06:- a, b Answer 07:- c Answer 08:- b Answer 09:- c Answer 10:- a

MS-100: Microsoft 365 Identity and Services

8